Multiple requests with the same Expect header.

It attempted to perform XPath Injection attacks on the Apache server.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

This IP belongs to Verizon Communications.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

It attempted to perform a SIP Invite Flood on the VOIP server.

An identity theft activity was linked back to this malicious IP.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

This IP belongs to Medium.

The IP attempted to perform XML Injection attacks on the Apache server.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

This IP belongs to Dropbox.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

The IP showed unusual patterns in referrer URLs.

It attempted to exploit known vulnerabilities in the SASL protocol.

This IP belongs to Freddie Mac.

Incidents of privacy-invasive software floating in our network were linked to this IP.

Multiple requests with the same X-Forwarded-For header.

This IP belongs to GoDaddy.